Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

Question

Please help shittyy malware

Apr 25, 2017 10:46AM PDT

I was browsing around and downloaded some hacks blag blah blah and then after 2 days I started getting annoying pop ups
There was a problem starting C:\qNzixwpotSqNzixwpotS\iv47.dll
After week of pop ups it's started going like every 2 mins my game accounts was hacked and I scanned with malwarebytes w defender cleaned registry deleted files and it's still piping up help please

Discussion is locked

- Collapse -
Answer
Keep in mind that autorun entries are editable.
Apr 25, 2017 10:51AM PDT
- Collapse -
I know
Apr 25, 2017 11:05AM PDT

My pc are clean I do defrag and ccleaner malwarebytes daily but that ell is ducking annoying I can't do with pc anything i think I need reinstall Windows but I don't wanna lose all the files so I have so little options

- Collapse -
That's far too quick a reply.
Apr 25, 2017 11:08AM PDT

I can't imagine you completed Grif's list as well as looked over the Hijackthis and Autoruns logs in that many minutes.

Did you forget to do the work or looking for a no-work solution?

How about this? Run regedit, tap F3 and put in iv47 and see if you can find that to delete.
Or try a regedit search for qNzixwpotSqNzixwpotS and remove those entries too.

- Collapse -
still
Apr 26, 2017 9:46AM PDT

I searched and registry just says finished searching registry

- Collapse -
I worry
Apr 26, 2017 9:50AM PDT

That you didn't complete the work. As to the regedit search, try a few more variations of things to search for. They tend to rename these to hide out.

But I'm finding folk not too conversant with the tools. When I have the PC I always find it with the tools I noted. But that's me. Many folk today do not like doing the work. They'll reset the PC rather than work to fix a minor thing.

That said, you can just ignore this popup as the malware is gone and all that is left is a message it didn't run.

- Collapse -
ell
Apr 26, 2017 10:05AM PDT

it pops as main Window I can't watch yt full screen play and it's annoying

- Collapse -
Maybe it's a browser addon?
Apr 26, 2017 10:10AM PDT

Be sure to reset those browsers.

If you did all the above and reset the browsers, head over to bleepingcomputer.com to read how to post there. They have other tools and methods to remove nasties and repair damage like this.

- Collapse -
Bleeping computer(!)
Apr 27, 2017 7:35AM PDT

I can't tell you how many times reading through posts @ that site has saved my arguably, overconfident malware killing posterior region Wink

- Collapse -
Bleeping and why.
Apr 27, 2017 9:53AM PDT

I have a set of methods I use that takes care of about 99 percent of the usual malware. But given how many PCs I see a month, every month one or two PCs have a deeply damaged OS that it's just not worth the day to repair it. The cheap exit is to slip in a blank HDD or SSD and factory restore the machine.

In the forum I share these methods but in the shop or office I have complete access to the PC which means I can at my discretion remove a suspect registry entry if I think it's an possible cure. This is not possible in a forum BUT Bleepingcomputer uses another set of methods so what we didn't kill here with say Grif's list, Bleeping might find it and kill it without an OS reload or factory reset.

- Collapse -
Answer
Ahsanbaba, Your Post Was Removed..
Apr 26, 2017 9:32AM PDT

Providing commercial off-site promotional links is SPAM and therefore against forum policies.

Grif